CVE-2024-6602

一、漏洞信息
 漏洞编号：[CVE-2024-6602](https://nvd.nist.gov/vuln/detail/CVE-2024-6602)
 漏洞归属组件：[mozjs102](https://gitee.com/src-openeuler/mozjs102)
 漏洞归属的版本：102.6.0,102.9.0
 CVSS V3.0分值：
  BaseScore：9.8 Critical
  Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
 漏洞简述：
  A mismatch between allocator and deallocator could have led to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.
 漏洞公开时间：2024-07-09 23:15:12
 漏洞创建时间：2025-06-20 16:45:00
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2024-6602
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
|  | https://bugzilla.mozilla.org/show_bug.cgi?id=1895032 |  |
|  | https://www.mozilla.org/security/advisories/mfsa2024-29/ |  |
|  | https://www.mozilla.org/security/advisories/mfsa2024-30/ |  |
|  | https://security-tracker.debian.org/tracker/CVE-2024-6602 |  |
|  | https://security-tracker.debian.org/tracker/CVE-2024-6602 |  |
|  | https://access.redhat.com/security/cve/cve-2024-6602 |  |
|  | https://cxsecurity.com/cveshow/CVE-2024-6602/ |  |
|  | http://people.ubuntu.com/~ubuntu-security/cve/CVE-2024-6602 |  |
|  | http://people.ubuntu.com/~ubuntu-security/cve/CVE-2024-6602 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6602.html |  |
|  | https://www.suse.com/security/cve/CVE-2024-6602.html |  |
|  | https://www.suse.com/security/cve/CVE-2024-6602.html |  |
|  | https://www.suse.com/security/cve/CVE-2024-6602.html |  |
|  | https://www.mozilla.org/security/advisories/mfsa2024-31/ |  |
|  | https://www.mozilla.org/security/advisories/mfsa2024-32/ |  |
|  | https://access.redhat.com/security/cve/CVE-2024-6602 |  |
|  | https://access.redhat.com/security/cve/CVE-2024-6602 |  |
|  | https://access.redhat.com/security/cve/CVE-2024-6602 |  |
|  | https://access.redhat.com/security/cve/CVE-2024-6602 |  |
|  | https://access.redhat.com/security/cve/CVE-2024-6602 |  |
|  | https://access.redhat.com/security/cve/CVE-2024-6602 |  |
|  | https://access.redhat.com/security/cve/CVE-2024-6602 |  |
|  | https://access.redhat.com/security/cve/CVE-2024-6602 |  |
|  | https://access.redhat.com/security/cve/CVE-2024-6602 |  |
|  | https://access.redhat.com/security/cve/CVE-2024-6602 |  |
|  | https://access.redhat.com/security/cve/CVE-2024-6602 |  |
|  | https://access.redhat.com/security/cve/CVE-2024-6602 |  |
|  | https://security-tracker.debian.org/tracker/CVE-2024-6602 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2024-6602 |  |
|  | https://access.redhat.com/security/cve/CVE-2024-6602 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6602.html |  |
|  | https://www.suse.com/security/cve/CVE-2024-6602.html |  |
|  | https://www.suse.com/security/cve/CVE-2024-6602.html |  |
|  | https://security-tracker.debian.org/tracker/CVE-2024-6602 |  |
|  | https://bugzilla.suse.com/1226316 |  |
|  | https://bugzilla.suse.com/1226316 |  |
|  | https://bugzilla.suse.com/1226316 |  |
|  | https://bugzilla.suse.com/1226316 |  |
|  | https://bugzilla.suse.com/1226316 |  |
|  | https://bugzilla.suse.com/1226316 |  |
|  | https://bugzilla.suse.com/1226316 |  |
|  | https://www.suse.com/support/update/announcement/2024/suse-su-20243507-1/ |  |
|  | https://bugzilla.suse.com/1184272 |  |
|  | https://bugzilla.suse.com/1228648 |  |
|  | https://bugzilla.suse.com/1229821 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6600 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6601 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6602 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6603 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6604 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6606 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6607 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6608 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6609 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6610 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6611 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6612 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6613 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6614 |  |
|  | https://www.suse.com/security/cve/CVE-2024-6615 |  |
|  | https://www.suse.com/security/cve/CVE-2024-7518 |  |
|  | https://www.suse.com/security/cve/CVE-2024-7519 |  |
|  | https://www.suse.com/security/cve/CVE-2024-7520 |  |
|  | https://www.suse.com/security/cve/CVE-2024-7521 |  |
|  | https://www.suse.com/security/cve/CVE-2024-7522 |  |
|  | https://www.suse.com/security/cve/CVE-2024-7525 |  |
|  | https://www.suse.com/security/cve/CVE-2024-7526 |  |
|  | https://www.suse.com/security/cve/CVE-2024-7527 |  |
|  | https://www.suse.com/security/cve/CVE-2024-7528 |  |
|  | https://www.suse.com/security/cve/CVE-2024-7529 |  |
|  | https://www.suse.com/security/cve/CVE-2024-8381 |  |
|  | https://www.suse.com/security/cve/CVE-2024-8382 |  |
|  | https://www.suse.com/security/cve/CVE-2024-8384 |  |
|  | https://www.suse.com/security/cve/CVE-2024-8385 |  |
|  | https://www.suse.com/security/cve/CVE-2024-8386 |  |
|  | https://www.suse.com/security/cve/CVE-2024-8387 |  |
|  | https://www.suse.com/security/cve/CVE-2024-8394 |  |
|  | https://ubuntu.com/security/CVE-2024-6602 |  |
|  | https://www.cve.org/CVERecord?id=CVE-2024-6602 |  |
|  | https://www.mozilla.org/en-US/security/advisories/mfsa2024-29/#CVE-2024-6602 |  |
|  | https://www.mozilla.org/en-US/security/advisories/mfsa2024-30/#CVE-2024-6602 |  |
|  | https://ubuntu.com/security/notices/USN-6890-1 |  |
|  | https://ubuntu.com/security/notices/USN-6903-1 |  |
|  | https://access.redhat.com/errata/RHBA-2024:6680 |  |
|  | https://issues.redhat.com/browse/RHEL-5263 |  |
|  | https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhba-2024_6680.json |  |
|  | https://access.redhat.com/errata/RHBA-2024:6679 |  |
|  | https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhba-2024_6679.json |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2296637 |  |
|  | https://www.cve.org/CVERecord?id=CVE-2024-6602 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2024-6602 |  |
|  | https://www.mozilla.org/en-US/security/advisories/mfsa2024-30/#CVE-2024-6602 |  |
|  | https://www.mozilla.org/en-US/security/advisories/mfsa2024-31/#CVE-2024-6602 |  |
|  | https://vigilance.fr/vulnerability/Mozilla-Firefox-Thunderbird-multiple-vulnerabilities-dated-10-07-2024-44698 |  |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  其它
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

无
</details>
 
二、漏洞分析结构反馈
 影响性分析说明：
  
 openEuler评分：
   
 受影响版本排查(受影响/不受影响)：
  1.master(102.9.0):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3:
4.openEuler-22.03-LTS-SP4:
5.openEuler-24.03-LTS(102.9.0):
6.openEuler-24.03-LTS-Next(102.9.0):
7.openEuler-24.03-LTS-SP1(102.9.0):
8.openEuler-24.03-LTS-SP2(102.9.0):

修复是否涉及abi变化(是/否)：
  1.master(102.9.0):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3:
4.openEuler-22.03-LTS-SP4:
5.openEuler-24.03-LTS(102.9.0):
6.openEuler-24.03-LTS-Next(102.9.0):
7.openEuler-24.03-LTS-SP1(102.9.0):
8.openEuler-24.03-LTS-SP2(102.9.0):

原因说明：
  1.master(102.9.0):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3:
4.openEuler-22.03-LTS-SP4:
5.openEuler-24.03-LTS(102.9.0):
6.openEuler-24.03-LTS-Next(102.9.0):
7.openEuler-24.03-LTS-SP1(102.9.0):
8.openEuler-24.03-LTS-SP2(102.9.0):

src-openEuler/mozjs102

内容风险标识

评论 (3)

src-openEuler/mozjs102 .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2024-6602

评论 (3)

搜索帮助

src-openEuler/mozjs102